CVE-2026-34522 SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory
An authenticated attacker can write arbitrary files outside the intended directory via path traversal in the chat import API, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-34522?
CVE-2026-34522 is a high-severity path traversal vulnerability in SillyTavern, published on 2 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into character_name. This issue has been patched in version 1.17.0.
Which versions are affected by CVE-2026-34522?
2 open source packages ship an affected version, including sillytavern. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
sillytavern npm | All versions | 1.17.0 |
sillytavern npm | All versions | 1.17.0 |
Products include Sillytavern Sillytavern.
How do I fix CVE-2026-34522?
Upgrade sillytavern to 1.17.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-34522 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34522 exists.
Other vulnerabilities in SillyTavern
- CVE-2026-34524 SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root
- CVE-2026-26286 SillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services
- CVE-2026-34523 SillyTavern: Path traversal allows file existence oracle
- CVE-2026-34526 SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6
Sources
Also known as GHSA-xvww-xhx6-22pf.